Package list libxstream-java / a6a98eb
New upstream version 1.4.11.1 Markus Koschany 2 years ago
11 changed file(s) with 68 addition(s) and 31 deletion(s). Raw diff Collapse all Expand all
1313 <groupId>com.thoughtworks.xstream</groupId>
1414 <artifactId>xstream-parent</artifactId>
1515 <packaging>pom</packaging>
16 <version>1.4.11</version>
16 <version>1.4.11.1</version>
1717 <name>XStream Parent</name>
1818 <url>http://x-stream.github.io</url>
1919 <description>
320320 <dependency>
321321 <groupId>com.thoughtworks.xstream</groupId>
322322 <artifactId>xstream</artifactId>
323 <version>1.4.11</version>
323 <version>1.4.11.1</version>
324324 </dependency>
325325 <dependency>
326326 <groupId>com.thoughtworks.xstream</groupId>
327327 <artifactId>xstream</artifactId>
328 <version>1.4.11</version>
328 <version>1.4.11.1</version>
329329 <classifier>tests</classifier>
330330 <type>test-jar</type>
331331 <scope>test</scope>
333333 <dependency>
334334 <groupId>com.thoughtworks.xstream</groupId>
335335 <artifactId>xstream</artifactId>
336 <version>1.4.11</version>
336 <version>1.4.11.1</version>
337337 <classifier>javadoc</classifier>
338338 <scope>provided</scope>
339339 </dependency>
340340 <dependency>
341341 <groupId>com.thoughtworks.xstream</groupId>
342342 <artifactId>xstream-hibernate</artifactId>
343 <version>1.4.11</version>
343 <version>1.4.11.1</version>
344344 </dependency>
345345 <dependency>
346346 <groupId>com.thoughtworks.xstream</groupId>
347347 <artifactId>xstream-hibernate</artifactId>
348 <version>1.4.11</version>
348 <version>1.4.11.1</version>
349349 <classifier>javadoc</classifier>
350350 <scope>provided</scope>
351351 </dependency>
352352 <dependency>
353353 <groupId>com.thoughtworks.xstream</groupId>
354354 <artifactId>xstream-jmh</artifactId>
355 <version>1.4.11</version>
355 <version>1.4.11.1</version>
356356 </dependency>
357357 <dependency>
358358 <groupId>com.thoughtworks.xstream</groupId>
359359 <artifactId>xstream-jmh</artifactId>
360 <version>1.4.11</version>
360 <version>1.4.11.1</version>
361361 <classifier>javadoc</classifier>
362362 <scope>provided</scope>
363363 </dependency>
364364 <dependency>
365365 <groupId>com.thoughtworks.xstream</groupId>
366366 <artifactId>xstream-benchmark</artifactId>
367 <version>1.4.11</version>
367 <version>1.4.11.1</version>
368368 </dependency>
369369 <dependency>
370370 <groupId>com.thoughtworks.xstream</groupId>
371371 <artifactId>xstream-benchmark</artifactId>
372 <version>1.4.11</version>
372 <version>1.4.11.1</version>
373373 <classifier>javadoc</classifier>
374374 <scope>provided</scope>
375375 </dependency>
920920 <distributionManagement>
921921 <repository>
922922 <id>ossrh-staging</id>
923 <url>http://oss.sonatype.org/service/local/staging/deploy/maven2</url>
923 <url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url>
924924 </repository>
925925 <snapshotRepository>
926926 <id>ossrh-snapshots</id>
927 <url>http://oss.sonatype.org/content/repositories/snapshots</url>
927 <url>https://oss.sonatype.org/content/repositories/snapshots</url>
928928 </snapshotRepository>
929929 <!--site>
930930 <id>github</id>
1313 <parent>
1414 <groupId>com.thoughtworks.xstream</groupId>
1515 <artifactId>xstream-parent</artifactId>
16 <version>1.4.11</version>
16 <version>1.4.11.1</version>
1717 </parent>
1818 <artifactId>xstream</artifactId>
1919 <packaging>jar</packaging>
185185 try {
186186 base64 = (StringCodec)base64Class.newInstance();
187187 } catch (final Exception e) {
188 } catch (final Error e) {
188189 }
189190 }
190191 if (base64 == null) {
1313 <parent>
1414 <groupId>com.thoughtworks.xstream</groupId>
1515 <artifactId>xstream-parent</artifactId>
16 <version>1.4.11</version>
16 <version>1.4.11.1</version>
1717 </parent>
1818 <artifactId>xstream-benchmark</artifactId>
1919 <packaging>jar</packaging>
1313 <parent>
1414 <groupId>com.thoughtworks.xstream</groupId>
1515 <artifactId>xstream-parent</artifactId>
16 <version>1.4.11</version>
16 <version>1.4.11.1</version>
1717 </parent>
1818 <artifactId>xstream-distribution</artifactId>
1919 <packaging>pom</packaging>
3232
3333 <p>Not yet released.</p>
3434 -->
35 <h1 id="1.4.11.1">1.4.11.1</h1>
36
37 <p>Released October 27, 2018.</p>
38
39 <h2>Hot fix</h2>
40
41 <ul>
42 <li>GHI:#133: XStream 1.4.11 fails to run on a Java Runtime &lt; 8.</li>
43 </ul>
3544
3645 <h1 id="1.4.11">1.4.11</h1>
3746
4554
4655 <ul>
4756 <li>GHPR:#91, GHPR:#106: Clean-up data stacks in UnmarshallingContext implementations in case of exception (by
48 Mä&auml;rt Bakhoff).</li>
57 M&auml;rt Bakhoff).</li>
4958 <li>GHI:#2: Unneeded contention in DefaultConverterLookup.</li>
5059 <li>GHI:#94: Fix PathConverter containing absolute Windows paths.</li>
5160 <li>GHI:#105: XStream's ObjectInputStream returns wrong values for readUnsignedByte and readUnsignedShort.</li>
1717
1818 <p><a href="versioning.html">About XStream version numbers...</a></p>
1919
20 <h1 id="stable">Stable Version: <span class="version">1.4.11</span></h1>
20 <h1 id="stable">Stable Version: <span class="version">1.4.11.1</span></h1>
2121
2222 <ul>
23 <li><b><a href="http://repo1.maven.org/maven2/com/thoughtworks/xstream/xstream-distribution/1.4.11/xstream-distribution-1.4.11-bin.zip">Binary distribution:</a></b>
23 <li><b><a href="http://repo1.maven.org/maven2/com/thoughtworks/xstream/xstream-distribution/1.4.11.1/xstream-distribution-1.4.11.1-bin.zip">Binary distribution:</a></b>
2424 Contains the XStream jar files, the Hibernate and Benchmark modules and all the dependencies.</li>
25 <li><b><a href="http://repo1.maven.org/maven2/com/thoughtworks/xstream/xstream-distribution/1.4.11/xstream-distribution-1.4.11-src.zip">Source distribution:</a></b>
25 <li><b><a href="http://repo1.maven.org/maven2/com/thoughtworks/xstream/xstream-distribution/1.4.11.1/xstream-distribution-1.4.11.1-src.zip">Source distribution:</a></b>
2626 Contains the complete XStream project as if checked out from the Subversion version tag.</li>
27 <li><b><a href="http://repo1.maven.org/maven2/com/thoughtworks/xstream/xstream/1.4.11/xstream-1.4.11.jar">XStream Core only:</a>
27 <li><b><a href="http://repo1.maven.org/maven2/com/thoughtworks/xstream/xstream/1.4.11.1/xstream-1.4.11.1.jar">XStream Core only:</a>
2828 The xstream.jar only as it is downloaded automatically when it is referenced as Maven dependency.</b></li>
29 <li><b><a href="http://repo1.maven.org/maven2/com/thoughtworks/xstream/xstream-hibernate/1.4.11/xstream-hibernate-1.4.11.jar">XStream Hibernate module:</a></b>
29 <li><b><a href="http://repo1.maven.org/maven2/com/thoughtworks/xstream/xstream-hibernate/1.4.11.1/xstream-hibernate-1.4.11.1.jar">XStream Hibernate module:</a></b>
3030 The xstream-hibernate.jar as it is downloaded automatically when it is referenced as Maven dependency.</li>
31 <li><b><a href="http://repo1.maven.org/maven2/com/thoughtworks/xstream/xstream-jmh/1.4.11/xstream-jmh-1.4.11-app.zip">XStream JMH module:</a></b>
31 <li><b><a href="http://repo1.maven.org/maven2/com/thoughtworks/xstream/xstream-jmh/1.4.11.1/xstream-jmh-1.4.11.1-app.zip">XStream JMH module:</a></b>
3232 The xstream-jmh-app.zip as standalone application with start scripts and all required libraries.</li>
3333 <li><b><a href="http://repo1.maven.org/maven2/com/thoughtworks/xstream/xstream/1.4.11-java7/xstream-1.4.11-java7.jar">XStream Core for Java 7 only:</a>
34 The xstream.jar only without the Java 8 stuff as it is downloaded automatically when it is referenced as Maven dependency.</b></li>
34 The xstream.jar only <a href="faq.html#Compatibility_Android">without the Java 8 stuff</a> as it is downloaded automatically when it is referenced as Maven dependency.</b></li>
3535 </ul>
3636
3737 <h1 id="previous-releases">Previous Releases</h1>
3434 <p>XStream 1.4.x requires Java 1.4 or later. Note, that the XStream libraries contains class files targeting
3535 different Java runtime versions or Java features. These classes are loaded by reflection and only used if XStream
3636 is running on an appropriate runtime environment.</p>
37 <p>Environments that load all class files of a Java archive can fail with this approach, the
38 <a href="#Compatibility_Android">Android runtime</a> is such an example. You can build your own version of XStream
39 with a <a href="#Compatibility_JDK">lower JDK</a> then.</p>
40 <p>For Java 9 and later you will currently have to permit the now illegal access for XStream to operate.</p>
3741
3842 <!-- ...................................................... -->
3943 <h2 id="Compatibility_JDK">Which JDK is required to build XStream?</h2>
4044 <p>XStream 1.4.x can be build still with JDK 1.4 (see BUILD.txt). However, to support the latest features it
41 requires currently a JDK of Java 8. Otherwise the resulting jar files will miss some classes not available on
45 requires currently a JDK of Java 8. Otherwise the resulting jar file will miss some class files not available on
4246 earlier runtimes. Depending on the target environment this can be useful (e.g. for Android or GAE).</p>
47 <p>Note, that such Java archives will fail on higher Java runtimes then.</p>
4348
4449 <!-- ...................................................... -->
4550 <h2 id="Compatibility_Dependencies">Which dependencies are required to run XStream?</h2>
4752 However it depends on the use case. XStream will run without dependencies using the DOM driver on all Java runtimes
4853 or the StAX driver in combination with Java 6 or greater. See the list of <a
4954 href="download.html#optional-deps">optional dependencies</a>.</p>
55 <p>Note, that XStream's manifest contains OSGi entries that declare all dependencies as optional.</p>
5056
5157 <!-- ...................................................... -->
5258 <h2 id="Compatibility_JVMs">Does XStream behave differently across different JVMs?</h2>
6571 starting with R25.1.0. Generally it works for all modern Java runtimes based on OpenJDK. Android basically supports
6672 the enhanced mode as well as the Google Application Engine, but the latter's security model limits the types that
6773 can be handled. Note, that an active SecurityManager might prevent the usage of the enhanced mode also.</p>
74 <p>Since Java 9 it is required to permit the now illegal access.</p>
6875
6976 <!-- ...................................................... -->
7077 <h2 id="Compatibility_enhanced_mode_advantage">What are the advantages of using enhanced mode over pure Java mode?</h2>
8592 <tr><td>Private fields</td><td>Yes</td><td>Yes</td></tr>
8693 <tr><td>Final fields</td><td>Yes &gt;= JDK 1.5</td><td>Yes</td></tr>
8794 </table>
88
89 <p>Note, that these undocumented features are still available with Java 9, since there is currently no public
90 functionality provided as replacement.</p>
95
96 <!-- ...................................................... -->
97 <h2 id="Compatibility_illegal_reflective_access">Java runtime warns me about an illegal reflective access by XStream!</h2>
98
99 <p>Yes, this is normal. A big part of XStream is reflection based and there is currently no replacement for the
100 complete required functionality. You will have to permit this access currently, otherwise XStream will not work.</p>
101
102 <!-- ...................................................... -->
103 <h2 id="Compatibility_no_module">Why does XStream not even declare an automated module name?</h2>
104
105 <p>Such a declaration would move XStream automatically into the module class path. However, in this environment a
106 lot of functionality does no longer work. Therefore it is on purpose that XStream stays currently in the unnamed
107 module.</p>
108
109 <!-- ...................................................... -->
110 <h2 id="Compatibility_JPMS">Will XStream support the Java Platform Module System (JPMS)?</h2>
111
112 <p>At some point definitely. However, you will have to accept a limited functionality only, comparable to the pure
113 Java mode. The access model is very restrictive and XStream will no longer be able to marshal all types of the Java
114 runtime like now.</p>
91115
92116 <!-- ...................................................... -->
93117 <h2 id="Compatibility_XPP">Why is my application not able to create a XmlPullParser with the XppDriver since XStream 1.4?</h2>
114138 that is equivalent to the Java level supported by the target version of Android.</p>
115139
116140 <p>Since XStream 1.4.10 an additional artifact is deployed to the Central Maven Repository with <em>-java7</em>
117 appended to the version that explicitly does not contain any Java 8 related stuff.</p>
141 appended to the version that explicitly does not contain any Java 8 related stuff. Note that this version will fail
142 on higher runtimes.</p>
118143
119144 <!-- ...................................................... -->
120145 <h2 id="Compatibility_GAE">Which limits exists for XStream in Google's Application Engine (GAE)?</h2>
7272
7373 <h1 id="news">Latest News</h1>
7474
75 <h2 id="1.4.11"><b>October 23, 2018</b> XStream 1.4.11 released</h2>
75 <h2 id="1.4.11.1"><b>October 27, 2018</b> XStream 1.4.11.1 released</h2>
76
77 <p class="highlight">Hot fix for XStream 1.4.11: Accidental breakage of Java runtimes %lt; 8.</p>
7678
7779 <p class="highlight">This maintenance release addresses again the security vulnerability <a href="CVE-2013-7285.html">
7880 CVE-2013-7285</a>, an arbitrary execution of commands when unmarshalling for XStream instances with
1212 <parent>
1313 <groupId>com.thoughtworks.xstream</groupId>
1414 <artifactId>xstream-parent</artifactId>
15 <version>1.4.11</version>
15 <version>1.4.11.1</version>
1616 </parent>
1717 <artifactId>xstream-hibernate</artifactId>
1818 <packaging>jar</packaging>
1212 <parent>
1313 <groupId>com.thoughtworks.xstream</groupId>
1414 <artifactId>xstream-parent</artifactId>
15 <version>1.4.11</version>
15 <version>1.4.11.1</version>
1616 </parent>
1717 <artifactId>xstream-jmh</artifactId>
1818 <packaging>jar</packaging>